Is there an RFC somewhere that requires NFS errors to be completely opaque?
* 2 Fedora 33 systems on the same subnet (172.31.248.0/24). * NFS client is 172.31.248.2; NFS server is 172.31.248.3 * /etc/exports on server contains /srv/upscale_data 172.31.248.0(rw,no_subtree_check,no_root_squash,insecure)
$ sudo mount -vvvv -t nfs4 172.31.248.3:/srv/upscale_data /mnt/upscale mount.nfs4: timeout set for Thu Feb 25 18:16:45 2021 mount.nfs4: trying text-based options 'vers=4.2,addr=172.31.248.3,clientaddr=172.31.248.2' mount.nfs4: mount(2): Permission denied mount.nfs4: trying text-based options 'vers=4,minorversion=1,addr=172.31.248.3,clientaddr=172.31.248.2' mount.nfs4: mount(2): Permission denied mount.nfs4: trying text-based options 'vers=4,addr=172.31.248.3,clientaddr=172.31.248.2' mount.nfs4: mount(2): Permission denied mount.nfs4: access denied by server while mounting 172.31.248.3:/srv/upscale_data
Wireshark shows that the client is sending:
Credentials Flavor: AUTH_UNIX (1) ... UID: 0 GID: 0
And the server responds with:
Reject State: AUTH_ERROR (1) Auth State: bad credential (seal broken) (1)
The server is logging ABSOLUTELY NOTHING in the journal, dmesg, or anywhere else (as far as I can tell).
Any ideas how I can figure out what is going on?